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The Federal Trade - Commission warns that most Internet scams arrive 
by means of Bulk E - Mail . And the accent is on "bulk." There are 
scammers out there who are willing to. . . 

. . .providers offer software that automates sending e-mail messages to 
recipients. Others will even send bulk e- mail solicitations for you. 
Most bulk e - mail providers insinuate that you can make a huge amount 
of money using their marketing techniques and "tricks". They neglect to 
mention that sending bulk e - mail violates the "terms of service" 
(TOS) of most Internet service providers (ISPs) . If you use automated 
("robotic") bulk e-mail programs your ISP may terminate your... 
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Abstract (Basic) : WO 200275570 Al 

NOVELTY - System for automatically detecting unwanted messages in 
real time comprises a redundant e - mail address detection and 
capture system comprising a computer program which has a process for 
accessing the directory and identifying message files, a process for 
locating an address of origin, subject or other specified criteria 
within each message file, a process for identifying whether each 
message file should be considered spam , a process for separating the 
spam and non- spam message files logically and a process physically 
moving or renaming the message files in a predetermined fashion. A 
frequency or quantity threshold is applied to identify spam . 

DETAILED DESCRIPTION - There are INDEPENDENT CLAIMS for: 

(1) A method of automatically detecting unwanted messages in real 
time as applied to a message router 

(2) An apparatus for redundant e - mail address detection and 
capture 

USE - Apparatus concerns e - mail messaging and spam filtering. 

ADVANTAGE - Apparatus detects unwanted messages in real time. 
DESCRIPTION OF DRAWING (S) - The figure shows a flow diagram of a 
redundant e - mail address detection and capture system, 
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Abstract (Basic) : WO 200219069 A2 

NOVELTY - Each mail includes header information including subject 
and non-subject headers and a main body containing message content. A 
numerical summary is formed only of the subject line and message 
content, which may include text or attached files. The generated 
numerical summary is stored and compared with previously stored 
summaries . 

DETAILED DESCRIPTION - If the number of matches exceeds a 
threshold an alert is generated, e.g. to indicate detection of a virus 
or Spam . Timestamp information may be stored with the summaries 
together with sender/recipient details and the Internet protocol 
address of origin to aid in detecting the originator. 

INDEPENDENT CLAIMS are included for 

(a) a software product for monitoring electronic mail 

(b) and a computer system for monitoring electronic mail 
USE - Monitoring electronic mail , e.g. to detect malicious 

content such as viruses or Spam . 

ADVANTAGE - Efficiently monitors for unsolicited and malicious 
mail . 
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Abstract: With the growing popularity of the Internet, unsolicited 
electronic mail ( spam ) has become a major concern. It fills up user's 
mailboxes, clogs mail relays, wastes the postmaster's time and creates ill 
will for sites that have been used as a relay. Most sites want to filter, 
spam before they receive it, but filtering spam is hard to do without 
filtering legitimate mail messages. This paper discusses what characterizes 
spam and describes rulesets that can be added to a Sendmail version 8.8 
sendmail. cf file to selectively reject mail from specific addresses, 
domains or IP addresses and to prevent spammers from relaying mail through 
a site. It discusses the different issues facing corporate sites and the 
special issues facing Internet service providers (ISPs) . The rulesets 
presented have been implemented as M4 template files so they can be easily 
integrated into a sendmail. cf file as a feature using M4 . These rulesets 
are currently in use at Harker Systems and other sites, and are available 
via anonymous ftp. (4 Refs) 
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ASK THE INFRA EXPERT column explains how criminal spammers use forged 
source addresses to help cover their tracks. Says that a fake credit card 
number is used to open accounts with national Internet service providers 

(ISPs) that offer service through modem pools that they rent from other 
providers. Adds that an ISP is then dialed up, and special software is 
used to send out tens of thousands of spam messages with forged e - mail 

addresses comprised of random letters for the user name, and a real domain 
name. Notes that as the spammer's account is terminated with one dial-up 
provider, the spammer simply moves on to the next dial-up provider and 
continues spamming. Says that most ISPs reject spam messages by 
bouncing them back to the sender . Adds that when the sender 's domain 
name was forged, some innocent victim not connected with the spammer must 
spend several days deleting tens of thousands of bounced messages. (JC) 
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Abstract: Concern about the proliferation of unsolicited bulk email , 
commonly referred to as " spam ", has been steadily increasing. When 
received in small quantities, spam may annoy recipients, but rarely poses 
a significant problem. However, some recipients of large quantities of 

spam find themselves so overwhelmed with unwanted email that it is 
time-consuming or difficult for them to ferret out their desired 
correspondence. Furthermore, unlike most junk postal mail, junk email 
frequently contains explicit sexual language and attached photographs that 
many recipients find offensive. With the advent of HTML-enabled email 

clients, some bulk emailers now send lengthy HTML-formatted email , 
complete with images and links to Java applets that may execute 
automatically when the email is read using some clients. The paper 
discusses possible solutions to the spam problem and the major factors 
that contribute to it. (7 Refs) 
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Document Type: Articles, News & Columns 
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Reports that KnowledgeMail 1.3 from Tacit Knowledge Systems can now be 
accessed from an intranet or portal. States that content can be viewed and 
acted on in context with other applications or directories. Says that under 
the control of each individual user, KnowledgeMail automatically creates 
private and public profiles of everyone in the enterprise and maintains 
them in real time. Adds that the system makes that information accessible 
across the enterprise thereby linking information seekers with knowledge 
holders on any given topic. Indicates that with the new software, 
distribution lists can be expanded so they can more effectively target the 
appropriate recipients instead of distributing e - mail to those who 
would have no interest. Says that by limiting the number of recipients 
by data fields in an LDAP server , the overall performance of the system 
can be increased, (sps) 
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